mindsdb
Yara Scan Results
Generated on 2024-07-14 06:56:29
Passed Tests
Failed Tests
Issues
FILE tests/integration_tests/flows/test_mysql_bin_api.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0B4A4E8BD11C48FFB4730D4D2C32191A' | 32 | 2249 | 0 | b'0B4A4E8BD11C48FFB4730D4D2C32191A' |
FILE tests/handler_tests/test_sap_erp_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' |
FILE tests/handler_tests/test_eventbrite_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0bb5e81d009275e956f98c418a9a3025' | 32 | 15680 | 0 | b'0bb5e81d009275e956f98c418a9a3025' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'282ef80475d468edff954cb243435432' | 32 | 16077 | 0 | b'282ef80475d468edff954cb243435432' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' |
FILE tests/handler_tests/test_tripadvisor_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' |
FILE tests/handler_tests/test_ms_teams_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' |
FILE tests/handler_tests/test_rocket_chat_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' |
FILE tests/handler_tests/test_coinbase_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' |
FILE tests/handler_tests/test_binance_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' |
FILE tests/integrations/utilities/rag/data/test.pdf
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| ft_pdf | Signature to trigger on PDF file magic. | ft_pdf | False | Jason Batchelor (Emerson) | 20141230 | b'%PDF' | 4 | 0 | 0 | b'%PDF' | |
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'92e4308b97cd13e6df58b1a27661d89c' | 32 | 267067 | 0 | b'92e4308b97cd13e6df58b1a27661d89c' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'92e4308b97cd13e6df58b1a27661d89c' | 32 | 267102 | 0 | b'92e4308b97cd13e6df58b1a27661d89c' |
FILE tests/unit/executor/test_executor.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0B4A4E8BD11C48FFB4730D4D2C32191A' | 32 | 29612 | 0 | b'0B4A4E8BD11C48FFB4730D4D2C32191A' |
FILE tests/unit/executor/test_udf.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' |
FILE tests/unit/handlers/test_web.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| ft_pdf | Signature to trigger on PDF file magic. | ft_pdf | False | Jason Batchelor (Emerson) | 20141230 | b'%PDF' | 4 | 770 | 0 | b'%PDF' | |
| ft_pdf | Signature to trigger on PDF file magic. | ft_pdf | False | Jason Batchelor (Emerson) | 20141230 | b'%PDF' | 4 | 1355 | 0 | b'%PDF' |
FILE
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| Spyeye | spyeye_plugins | $b | False | Jean-Philippe Teissier / @Jipe_ () | b'config.dat' | 10 | 1016 | 0 | b'config.dat' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0b9c477a9c2845aa94c72d56b621203d' | 32 | 2151 | 0 | b'0b9c477a9c2845aa94c72d56b621203d' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'd25509b171ad79395dc2c51b099ee6d0' | 32 | 3702 | 0 | b'd25509b171ad79395dc2c51b099ee6d0' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'21510b8a953c4d62958c9907f3cf9f87' | 32 | 1087 | 0 | b'21510b8a953c4d62958c9907f3cf9f87' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'70f28e55416b4dfe8588aa175ecae63a' | 32 | 1316 | 0 | b'70f28e55416b4dfe8588aa175ecae63a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'6d1480e0bf4b46e1a71be093f105d654' | 32 | 1566 | 0 | b'6d1480e0bf4b46e1a71be093f105d654' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'169fa742a8374fe9a516caecfb33432a' | 32 | 1830 | 0 | b'169fa742a8374fe9a516caecfb33432a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'b144844d418f404a8f0f1da2a63cdf7c' | 32 | 1707 | 0 | b'b144844d418f404a8f0f1da2a63cdf7c' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'25544d8fe08f4b06a4cecceabc49ff6a' | 32 | 1742 | 0 | b'25544d8fe08f4b06a4cecceabc49ff6a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'b144844d418f404a8f0f1da2a63cdf7c' | 32 | 1811 | 0 | b'b144844d418f404a8f0f1da2a63cdf7c' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'10eeb618d598468ba81c8d83da9613ff' | 32 | 2357 | 0 | b'10eeb618d598468ba81c8d83da9613ff' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'10eeb618d598468ba81c8d83da9613ff' | 32 | 2416 | 0 | b'10eeb618d598468ba81c8d83da9613ff' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'10eeb618d598468ba81c8d83da9613ff' | 32 | 3088 | 0 | b'10eeb618d598468ba81c8d83da9613ff' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'3666b704803140e2b60cadfcc59cf66a' | 32 | 3127 | 0 | b'3666b704803140e2b60cadfcc59cf66a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'3366b704803140e2b60cadfcc59cf66a' | 32 | 3187 | 0 | b'3366b704803140e2b60cadfcc59cf66a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'b144844d418f404a8f0f1da2a63cdf7c' | 32 | 3634 | 0 | b'b144844d418f404a8f0f1da2a63cdf7c' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'23d6b9e0c2fab7eba2e8b7e452cead47' | 32 | 3111 | 0 | b'23d6b9e0c2fab7eba2e8b7e452cead47' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| ft_pdf | Signature to trigger on PDF file magic. | ft_pdf | False | Jason Batchelor (Emerson) | 20141230 | b'%PDF' | 4 | 0 | 0 | b'%PDF' | |
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'92e4308b97cd13e6df58b1a27661d89c' | 32 | 267067 | 0 | b'92e4308b97cd13e6df58b1a27661d89c' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'92e4308b97cd13e6df58b1a27661d89c' | 32 | 267102 | 0 | b'92e4308b97cd13e6df58b1a27661d89c' | ||
| ft_zip | File type signature for basic ZIP files. | ft_zip | $pk | False | Jason Batchelor (Emerson) | 20141217 | b'PK\x03\x04' | 4 | 0 | 0 | b'PK\x03\x04' |
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00' | 30 | 0 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00' | 30 | 331 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00' | 30 | 914 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00' | 30 | 1174 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00' | 30 | 2047 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00' | 30 | 2291 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00' | 30 | 2819 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00' | 30 | 3207 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00' | 30 | 3513 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00' | 30 | 3748 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'cf93972b116ca5268827d575f2cc226b' | 32 | 384 | 0 | b'cf93972b116ca5268827d575f2cc226b' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0996e5faa3f7415bacd51a6e8e161d5e' | 32 | 6735 | 0 | b'0996e5faa3f7415bacd51a6e8e161d5e' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'c22335d83cb04ac281e2ef080792f2dd' | 32 | 6850 | 0 | b'c22335d83cb04ac281e2ef080792f2dd' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'23d6b9e0c2fab7eba2e8b7e452cead47' | 32 | 5275 | 0 | b'23d6b9e0c2fab7eba2e8b7e452cead47' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'd25509b171ad79395dc2c51b099ee6d0' | 32 | 4040 | 0 | b'd25509b171ad79395dc2c51b099ee6d0' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| dangerous-sites | SUSP_Websites | $site_6 | False | christian-byrne () | b'ngrok.io' | 8 | 2883 | 0 | b'ngrok.io' | ||
| dangerous-sites | SUSP_Websites | $site_6 | False | christian-byrne () | b'ngrok.io' | 8 | 3099 | 0 | b'ngrok.io' | ||
| suspicious_sites | SUSP_Websites | $site_6 | False | SECUINFRA Falcon Team () | b'ngrok.io' | 8 | 2883 | 0 | b'ngrok.io' | ||
| suspicious_sites | SUSP_Websites | $site_6 | False | SECUINFRA Falcon Team () | b'ngrok.io' | 8 | 3099 | 0 | b'ngrok.io' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | 64 | 1333 | 0 | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | 64 | 1335 | 0 | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e22e77495f2fb83c34d5fae2ad8ab63c0a87b6b573b6208e1535b23b89ea66d6' | 64 | 1345 | 0 | b'e22e77495f2fb83c34d5fae2ad8ab63c0a87b6b573b6208e1535b23b89ea66d6' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | 64 | 331 | 0 | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'6282abe6a492de4145d7bb601023762212f9ddbbe78278bd6771c8b3b2f2a13b' | 64 | 1451 | 0 | b'6282abe6a492de4145d7bb601023762212f9ddbbe78278bd6771c8b3b2f2a13b' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $desc3 | False | () | b'qemu' | 4 | 71797 | 0 | b'qemu' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev3 | False | () | b'qemu' | 4 | 71797 | 0 | b'qemu' | ||
| anti_sandboxing | Qemu_Detection | $desc3 | False | () | b'qemu' | 4 | 71797 | 0 | b'qemu' | ||
| anti_sandboxing | Qemu_Detection | $dev3 | False | () | b'qemu' | 4 | 71797 | 0 | b'qemu' | ||
| userdb_jclausing | _Microsoft_WAV_Audio_file_ | $0 | False | () | b'RIFF2\x18\x15\x00WAVEfmt' | 15 | 0 | 0 | b'RIFF2\x18\x15\x00WAVEfmt' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2e1dddc8621f72155f24cf2e0adbde548458d3cab9f00c0139eea840d0ac4746' | 64 | 1320 | 0 | b'2e1dddc8621f72155f24cf2e0adbde548458d3cab9f00c0139eea840d0ac4746' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | 64 | 898 | 0 | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'82fa480335ce42c0aa3758cb0efe66be' | 32 | 390 | 0 | b'82fa480335ce42c0aa3758cb0efe66be' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev3 | False | () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $vmware24 | False | () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| anti_sandboxing | VMWare_Detection | $dev3 | False | () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| anti_sandboxing | VMWare_Detection | $vmware24 | False | () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| anti_sandboxing | vmdetect | $vmware24 | False | nex () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev3 | False | () | b'vmware' | 6 | 1784 | 0 | b'vmware' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $vmware24 | False | () | b'vmware' | 6 | 1784 | 0 | b'vmware' | ||
| anti_sandboxing | VMWare_Detection | $dev3 | False | () | b'vmware' | 6 | 1784 | 0 | b'vmware' | ||
| anti_sandboxing | VMWare_Detection | $vmware24 | False | () | b'vmware' | 6 | 1784 | 0 | b'vmware' | ||
| anti_sandboxing | vmdetect | $vmware24 | False | nex () | b'vmware' | 6 | 1784 | 0 | b'vmware' |
FILE docs/callbacks.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' |
FILE docs/sql/feature-importance.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' |
FILE docs/package-lock.json
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $data1 | False | () | b'vBox' | 4 | 299067 | 0 | b'vBox' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev3 | False | () | b'vBox' | 4 | 299067 | 0 | b'vBox' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $data1 | False | () | b'vBox' | 4 | 299067 | 0 | b'vBox' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev3 | False | () | b'vBox' | 4 | 299067 | 0 | b'vBox' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' |
FILE docs/use-cases/data_enrichment/hugging-face-examples.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00020051795581821352' | 20 | 25906 | 0 | b'00020051795581821352' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00004535282641882077' | 20 | 30846 | 0 | b'00004535282641882077' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00000261212517216336' | 20 | 40534 | 0 | b'00000261212517216336' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00022261829872149974' | 20 | 42103 | 0 | b'00022261829872149974' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00001537964453746099' | 20 | 52376 | 0 | b'00001537964453746099' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00003155150625389069' | 20 | 52578 | 0 | b'00003155150625389069' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00003863943129545078' | 20 | 53346 | 0 | b'00003863943129545078' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00002220332135038916' | 20 | 53435 | 0 | b'00002220332135038916' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00003454017496551387' | 20 | 54027 | 0 | b'00003454017496551387' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00000970239307207521' | 20 | 54683 | 0 | b'00000970239307207521' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00001882187461887952' | 20 | 54839 | 0 | b'00001882187461887952' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00001339179198112106' | 20 | 55221 | 0 | b'00001339179198112106' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00004790363891515881' | 20 | 55289 | 0 | b'00004790363891515881' |
FILE docs/use-cases/ai_workflow_automation/twilio-chatbot.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' |
FILE docs/use-cases/ai_workflow_automation/customer-reviews-notifications.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| dangerous-sites | SUSP_Websites | $site_6 | False | christian-byrne () | b'ngrok.io' | 8 | 438 | 0 | b'ngrok.io' | ||
| suspicious_sites | SUSP_Websites | $site_6 | False | SECUINFRA Falcon Team () | b'ngrok.io' | 8 | 438 | 0 | b'ngrok.io' |
FILE docs/assets/sql/tutorials/generating_images_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'd5c9b04771c0469ff491955adcaeec7a' | 32 | 87 | 0 | b'd5c9b04771c0469ff491955adcaeec7a' |
FILE docs/assets/sql/tutorials/generating_images_1.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'1f01c4cf670f6b15903856d7ea125974' | 32 | 87 | 0 | b'1f01c4cf670f6b15903856d7ea125974' |
FILE docs/assets/sql/select_file.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| userdb_jclausing | _MEW_11_SE_11__Northfox_ | $0 | False | () | b'\xe9\xf6\x15+\x07\x0c]\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00' | 17 | 32489 | 0 | b'\xe9\xf6\x15+\x07\x0c]\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDF' | 20 | 52717 | 0 | b'DDDDDDDDDDDDDDDDDDDF' |
FILE docs/assets/docker/docker_desktop/
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 98730 | 0 | b'DDDDDDDDDDDDDDDDDDDD' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 100518 | 0 | b'DDDDDDDDDDDDDDDDDDDD' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'BDDDDDDDDDDDDDDDDDDD' | 20 | 181870 | 0 | b'BDDDDDDDDDDDDDDDDDDD' |
FILE docs/assets/docker/docker_desktop/containers-running-extension.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 110506 | 0 | b'DDDDDDDDDDDDDDDDDDDD' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 185805 | 0 | b'DDDDDDDDDDDDDDDDDDDD' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 185912 | 0 | b'DDDDDDDDDDDDDDDDDDDD' |
FILE docs/
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'a8938acb6c6b47f98cb3225ede3d33b5' | 32 | 4104 | 0 | b'a8938acb6c6b47f98cb3225ede3d33b5' | ||
| dangerous-sites | SUSP_Websites | $site_6 | False | christian-byrne () | b'ngrok.io' | 8 | 4221 | 0 | b'ngrok.io' | ||
| dangerous-sites | SUSP_Websites | $site_6 | False | christian-byrne () | b'ngrok.io' | 8 | 4308 | 0 | b'ngrok.io' | ||
| dangerous-sites | SUSP_Websites | $site_6 | False | christian-byrne () | b'ngrok.io' | 8 | 4461 | 0 | b'ngrok.io' | ||
| dangerous-sites | SUSP_Websites | $site_6 | False | christian-byrne () | b'ngrok.io' | 8 | 4816 | 0 | b'ngrok.io' | ||
| suspicious_sites | SUSP_Websites | $site_6 | False | SECUINFRA Falcon Team () | b'ngrok.io' | 8 | 4221 | 0 | b'ngrok.io' | ||
| suspicious_sites | SUSP_Websites | $site_6 | False | SECUINFRA Falcon Team () | b'ngrok.io' | 8 | 4308 | 0 | b'ngrok.io' | ||
| suspicious_sites | SUSP_Websites | $site_6 | False | SECUINFRA Falcon Team () | b'ngrok.io' | 8 | 4461 | 0 | b'ngrok.io' | ||
| suspicious_sites | SUSP_Websites | $site_6 | False | SECUINFRA Falcon Team () | b'ngrok.io' | 8 | 4816 | 0 | b'ngrok.io' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' |
FILE docs/rest/models/describe-model.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' |
FILE docs/integrations/ai-engines/replicate-text2video.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e22e77495f2fb83c34d5fae2ad8ab63c0a87b6b573b6208e1535b23b89ea66d6' | 64 | 1883 | 0 | b'e22e77495f2fb83c34d5fae2ad8ab63c0a87b6b573b6208e1535b23b89ea66d6' |
FILE docs/integrations/ai-engines/replicate-audio.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | 64 | 1863 | 0 | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' |
FILE docs/integrations/ai-engines/replicate-text2img.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | 64 | 1810 | 0 | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' |
FILE docs/integrations/ai-engines/replicate-img2text.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2e1dddc8621f72155f24cf2e0adbde548458d3cab9f00c0139eea840d0ac4746' | 64 | 1854 | 0 | b'2e1dddc8621f72155f24cf2e0adbde548458d3cab9f00c0139eea840d0ac4746' |
FILE docs/integrations/ai-engines/replicate-llm.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'6282abe6a492de4145d7bb601023762212f9ddbbe78278bd6771c8b3b2f2a13b' | 64 | 1917 | 0 | b'6282abe6a492de4145d7bb601023762212f9ddbbe78278bd6771c8b3b2f2a13b' |
FILE docs/integrations/ai-engines/anomaly.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'cf93972b116ca5268827d575f2cc226b' | 32 | 384 | 0 | b'cf93972b116ca5268827d575f2cc226b' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0996e5faa3f7415bacd51a6e8e161d5e' | 32 | 6729 | 0 | b'0996e5faa3f7415bacd51a6e8e161d5e' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'c22335d83cb04ac281e2ef080792f2dd' | 32 | 6844 | 0 | b'c22335d83cb04ac281e2ef080792f2dd' |
FILE docs/integrations/data-integrations/all-data-integrations.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/oracle.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/cloud-spanner.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/sap-hana.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/surrealdb.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| dangerous-sites | SUSP_Websites | $site_6 | False | christian-byrne () | b'ngrok.io' | 8 | 1627 | 0 | b'ngrok.io' | ||
| suspicious_sites | SUSP_Websites | $site_6 | False | SECUINFRA Falcon Team () | b'ngrok.io' | 8 | 1627 | 0 | b'ngrok.io' |
FILE docs/integrations/data-integrations/google-bigquery.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/snowflake.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' |
FILE docs/sdks/mongo/database.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' |
FILE docs/sdks/mongo/databases/insertOne.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' |
FILE docs/yarn.lock
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $data1 | False | () | b'vBox' | 4 | 174341 | 0 | b'vBox' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev3 | False | () | b'vBox' | 4 | 174341 | 0 | b'vBox' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $data1 | False | () | b'vBox' | 4 | 174341 | 0 | b'vBox' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev3 | False | () | b'vBox' | 4 | 174341 | 0 | b'vBox' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' |
FILE docker/db_images/postgres/certs/server.crt
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' |
FILE docker/db_images/postgres/certs/root.crt
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' |
FILE docker/docker-compose-ci.yml
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|